Taiga vulnerabilities

Products

• taiga 1
• taiga-back 1

Latest Taiga CVEs

Newest publication first

1. CVE-2026-65055 Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data Endpoints

   Published 2026-07-21

   Medium·CVSS 6.9 EPSS 0.33%

   Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration of any private project by supplying a project ID to the filters_data API endpoints on UserStory, Task, Issue, a...

2. CVE-2024-53556 An Open Redirect vulnerability in Taiga v6.8.1 allows attackers to redirect users to arbitrary websites via appending a crafted link to /login?next= in the login page URL.

   Published 2024-11-25

   Medium·CVSS 6.1 EPSS 0.31%

   An Open Redirect vulnerability in Taiga v6.8.1 allows attackers to redirect users to arbitrary websites via appending a crafted link to /login?next= in the login page URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.